Normal code path for query (with non empty query selector) on a shard would involve calling ShardChunkManager::belongsToMe to make sure that the matched document actually belongs to the current shard. There is no such check being done on the count command.